CERT Releases Basic Fuzzing Framework

[Ocky]

http://threatpost.com/en_us/blogs/ce...amework-052710

The Basic Fuzzing Framework (BFF), available here, is described as a simplified version of automated dumb fuzzing and includes a Linux virtual machine that has been optimized for fuzz testing and a set of scripts to implement a software test.

Fuzz testers, or fuzzers, are used by security researchers to find vulnerabilities by sending random input to an application. If the program contains a vulnerability that can leads to an exception, crash or server error, researchers can parse the results of the test to pinpoint the cause of the crash.